Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File: 1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier: wxaZNQoO84xNCphlMVsUMQrqNWmbmBv/XK/f9/n/BgI=
Subject key identifier: B1:60:8C:3A:38:AB:08:1F:94:15:83:87:4A:1F:6E:FE:26:6D:94:8B
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer: /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial: 0194BD17831168251E053E722A3C6454C4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number: 067C
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: r7VLF02TNG2lTnDgebcK0sCFMG2gdx/UJgACBR0MQZk=)
2: BtbTjlVmCrr8FM6cqZ2L6WfooLI.roa (hash: DB5JF41Iz6t5oALsnpByg4NgG1R5sryuRnCUBnIxDiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:11:68:25:1e:05:3e:72:2a:3c:64:54:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=b1608c3a38ab081f941583874a1f6efe266d948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:a8:d3:ca:b4:da:e5:5b:1f:b7:fc:46:38:
80:0d:48:36:73:1a:38:40:01:29:e9:7c:97:b8:98:
64:4a:c1:23:4e:19:a9:a9:8f:79:71:f6:ca:9a:e6:
af:3d:46:6a:3a:18:a2:f9:80:a5:36:2f:c2:c5:c6:
a2:20:8b:da:93:fa:6a:48:2a:a9:a9:92:15:07:07:
26:6e:73:d7:ba:2e:69:70:50:ac:02:12:89:bb:a6:
7d:a6:0f:f6:45:db:80:5b:53:51:6d:99:94:a4:46:
ef:66:3c:15:ea:e0:9d:7d:db:8c:52:3a:7f:3a:3c:
13:b5:9a:b4:9c:f1:b6:6d:65:50:81:cb:48:9f:1b:
2e:48:09:6f:00:57:0b:c8:ea:9b:a5:50:6c:ce:e4:
9e:d3:be:60:63:d9:aa:04:12:9d:d8:0f:e6:c1:cb:
63:84:b2:86:71:9f:36:fb:28:3b:49:46:38:50:5c:
b9:d1:11:de:31:4b:35:e5:63:d0:64:37:6b:9c:6f:
e8:12:05:83:28:f8:9d:22:40:79:b0:a7:34:ad:19:
62:66:7a:5a:ec:c2:0f:96:ec:08:d5:71:90:94:10:
46:fa:da:c8:14:e1:fd:d9:35:e8:53:da:62:02:8e:
e8:59:ea:68:5e:19:a0:4e:ae:b1:05:ee:75:a5:1a:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:60:8C:3A:38:AB:08:1F:94:15:83:87:4A:1F:6E:FE:26:6D:94:8B
X509v3 Authority Key Identifier:
keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:98:99:fc:2a:a0:97:f4:c0:0c:0f:5a:0b:a2:14:e6:5e:9d:
91:d1:75:40:aa:54:56:b8:4d:d7:49:d3:39:49:a2:fd:ee:86:
57:e2:58:2b:9d:bc:81:6e:e7:25:f2:94:55:60:76:b2:14:99:
d9:65:df:25:27:96:9b:7c:b2:7e:72:a1:7b:b3:ef:f4:a1:d1:
68:dd:5d:cd:19:9d:d5:19:dc:ca:81:cd:5d:d5:02:7a:2f:f2:
49:95:96:5d:98:91:97:c9:32:5e:01:a2:ba:6f:68:2f:d1:8b:
a5:ac:09:8b:f8:ad:62:3a:12:ac:f4:84:02:5f:7e:33:8e:bd:
51:11:b0:b5:5f:5a:68:ea:11:e9:45:63:ae:3c:b5:73:20:24:
fd:d7:1f:dc:fd:71:e9:05:6d:9e:78:94:d3:4a:08:13:8d:69:
98:e7:93:21:cb:47:ec:94:66:50:1f:47:25:c9:89:1c:c5:04:
53:ae:c2:6b:a0:86:ec:4f:fa:2c:6a:5e:06:56:ff:44:cf:a8:
26:5b:09:d3:69:51:a8:c5:51:7b:de:36:77:bf:d2:21:88:fd:
37:f1:de:cf:2c:8d:0d:b4:aa:6b:e3:75:90:c8:0a:4c:88:03:
ba:0a:57:46:86:9b:c9:79:7d:1e:51:2e:06:d3:18:08:ad:8a:
fa:26:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:30 2025 by rpki-client